>If this had happened to me, in the future I'd put a time-bomb in the code that can only be deactivated by a code you send him, once you get payment.

Just as an aside, I think this is actually illegal in the UK.

Kevin