As long as you are showing them a live example of the site, whether it's on your web space or theirs, they are going to be able to steal it if they want to. This is why you should always take 50% upfront, just to insure against this stuff.
You do get some dishonest people out there and we have all be stung in the past, just bad luck really
