php session expires after 2- 3 times entered wrong password?

[amitweb847]

hello,

i have a simple query plz. help.

i have developed a admin section to maintain a website, where i want to put validation if a user put wrong password 2 and 3 times then the account should be block for 30 minutes.

or 1 more thing, After 1 year the password should be changed automatically.