Well, it wasn't an open invitation for a DDOS attack, but I guess simply having a domain is an invitation for anyone who stumbles across your site and has waaay too much time on their hands.

I was more concerned about the comments script I just added and whether or not it could be used to deface or redirect the site, as well as the other questions I asked in the OP.

Certainly, my ISP isn't "ok" with me requesting DDOS attacks, but I would assume they would just unlease my modem if it was obvious that it was being DDOSed.

And I and my family would be stuck w/out Internet until I was leased a new IP...