I recently heard about another website that has been stolen from under the noses of its developers, which happens more often than you might think these days. Good ideas are at a premium and if your idea takes off online you are at considerable risk from unscrupulous internet 'persons'.
When a 'lay' person gets an idea for a website they usually go to a 'friend' who knows about these things to get it going, often that 'friend' is not a real life friend at all but rather an 'online' acquaintance with expertise and possibly contacts that the lay person lacks. This is a really good way to get ripped off!
The first thing to remember when developing a website is that without control of the Domain Name you have or own nothing! Register the domain name you intend to use with an independent registrar, DO NOT register your domain name with the hosting company or 'person' as this will leave them in control of it. The second most important thing you need to do is to keep an up to date copy of all code and data that the site consists of. You must have FTP access to the hosting server and update your backup every time a major change is made to the site, any reputable host will have staff that can help you with this. You should also choose a hosting company that is In Your Country of Residence because as a last resort you may need to go to court to establish your ownership of the site.
Be careful who you grant access to! how well do you know the person or persons who are working on your website? If you meet them socially in real life you retain the option to smack them on the nose but if you grant access to an online acquaintance you have no real proof as to who or where they are, and hence NO recourse if they screw you over. The sort of things that they can do to you are possibly; insertion of 'phishing' holes in your site and other unauthorised code. Theft of your data including credit card info, email addresses and IP addresses of your members and visitors. Note that any website is valued depending on the number of members it has and the number of page hits it gets, if your website takes off you could be sitting on a membership/email list some company's will pay a fortune for! And ultimately they could steal the entire site and deny you any further access to it. You are particularly at risk from this type of theft if your host is an online 'friend' and they control the host server, which is why it is always best to go with reputable hosting company in your own country even if this means that you have to comply with restrictive laws and legislation.
Finally: A 'Gentleman's Agreement' is worth only the paper its printed on, i.e. nothing at all. Get written contracts for expensive development work, transfers of ownership of sites and or domain names and know that the most important page on your website is the 'Terms of service' page, get this wrong and you could loose your shirt.
