I Can't use UserPro on wpengine.com for Security related policies

[Miguel de la Cueva]

I love UserPro and i love wpengine.com but it seems that they can’t live together 🙁

On wpengine.com a cluster of wordpress users i can’t use userpro correctly because they are telling me that are some security issues.

I have a few problems relating to images.
1. I am receiving a ERROR: Not Found when I try and upload an avatar or a photo on a blog on the frontend
2. Posts by user are displaying but are missing images
3. I do not have any options to upload a profile cover image

i had asked wpengine.com people to change the permisions for the files

The most common fix to this problem is to chmod the following folders and files to 777

/userpro/lib/cache/
/userpro/lib/cache/timthumb_cacheLastCleanTime.touch
/userpro/lib/cache/index.html

but they told me this:

Just so you know in case this doesn’t work, 777 permissions are not allowed on our platform, since it is a security risk and unnecessary for the functionality of a site or plugin. If the theme’s settings show that it’s necessary to have such permissions, it would be best to contact the developer to have that requirement removed from their theme.

Plus all this

wpengine.com platform is automatically updating thimthumb.php file to the last version because the security policies.

[Ghost1227]

Hey Miguel!

Did you upload the plugin through FTP or through the WordPress installer? Changing permissions to 777 isn’t necessary (I’m running UserPro on a WPE site with no issues), it’s usually actually a folder owner or group issue.

[admin]

I believe UserPro is using latest timthumb version, there could be some reasons for why your thumbs are not generated correctly, one of the reasons is correct chmod, but that’s not everything. If you would like us to help with this matter, please paste a sample link to broken thumbnail so I can try to identify the problem and tell you how to fix it.

Thanks!