webmaster proving to be dishonest and must terminate him. Have large
Internet site webmaster has all security codes. Need to change access
code to prevent retaliation. Web host is NMF. How to prove Owners
intent is legit.

---

Clarification of Question by cbm2-ga on 27 May 2005 16:13 PDT

A paid webmaster usually has control over the site especially if the
owner is not computer wise. In a change over in webmasters the site is
exposed to possible problems inas much as Owner needs to prudently
secure passcodes so to advoid more problems. What steps can be taken
to void and reissue new access codes. Codes were changed by webmaster
prior to his discharge.

Do you have a written contract with your webmaster?

re written agreement.................8 year handshake

Hire a lawyer.

First thing I would do is copy all the files from the website.  If you
don't know how to do this or cannot access the files, tell the guy you
want to put a backup offsite in case something happens to the website.

Once you have the files, you are halfway home.

Next thing to do would be to get a list of all the login information. 
Tell him you need to get all that information in the offsite backup as
well.

Once you get it all, wait for him to take a day of vacation and change
it ALL at once.  Fire him when he comes back.

Hopefully the owner, not the webmaster, established the account with
the hosting company. If this is the case the owner should have little
trouble locking the webmaster out.

You might also look at who the domain is registered to. If it is
registered to the Webmaster this is a serious matter that will have to
be resolved. He can hijack the domain.

On the flip side if the owner is the registered owner of the domain,
it might be possible to just transfer the web content and the domain
to a new host, making sure everything is secure at that point.

The best advice is to avoid this situation. Never give the webmaster
the only keys to the web site and make sure everything is registered
in the name of the owner (with the owner providing unique
authentication).