Manual:$wgUpgradeKey

Maintenance scripts setting: $wgUpgradeKey
Password that controls access to web-based updater.
Introduced in version:1.17.0 (r75392)
Removed in version:still in use
Allowed values:(string)
Default value:false

Details edit

When overridden in LocalSettings.php , this setting allows you to run upgrades from the web interface. The value of this variable serves as a password protecting the upgrade script.

The installer in 1.17+ adds this variable to LocalSettings.php and fills it with a random 16-character password. If it is not set in LocalSettings.php, the upgrader will tell you what to set it to in order to authorize the upgrade process.

For security, do not set this to a guessable string. Instead, use a secure value, e.g., the one supplied by the installation/upgrade process. To cause the upgrader to generate a new key, delete the old key from LocalSettings.php.

See also edit