Brute force login attack protection system
This script allows a user X failed logins. After this, their account is locked for N minutes. After the lock ends, they are allowed X more failed logins, and the process starts from the beginning. All logins are logged with IP address and timestamp.
This script is specific to a site I recently made, so it will have to be adapted to your login system. I can do this if you are interested, charging for my time, or you can do it, just replace my site specific functions (alerts_add, app_redirect, and db_*) and create the tables.
Login Protection System Script
Login Protection System SQL Export