@applebaps said:
Oh wow, that’s pretty simple. So I could just take any PHP shell I’ve got lying around and tack a WP plugin header/signature on it? Dang. I’ll have to try testing that on SHIELD. Thanks for the info!
According to the docs, this is all that needs to be done, yes.