01-22-2015, 11:51 AM
yeah its a good idea, after 3 or 5 wrong login attempts it should be locked for some hours for that ip. And in admin panel there should be control to change number of login attempts and amount of time to lock after wrong attempts.