I'm going to be taking over as webmaster for a couple of small websites. The current webmaster has been sloppy and negligent for some time. At this point, the sites owner is a little concerned that this guy might refuse to provide the login and passwords he's using, or worse, try to sabotage the sites once told that he's no longer needed for them.
What is the safest way to make the transition and protect the integrity of the sites? I've never dealt with this sort of thing before and am not sure how to go about it - or what is and isn't possible. I've designed and maintained a few of my own websites in the past, but a friend bundled my domain with a bunch of his and he dealt with the ISP. The owner isn't at all experienced in these things, he's let this guy handle things pretty much entirely. Can the owner contact the ISP directly and get the current login information without them also automatically informing the current webmaster? If so, can I then login and check things out without the current webmaster knowing?
Thanks in advance for your help with this sticky situation.