How do you block a users account if they enter a wrong password 3 times in PHP?

use session :o

in your form processing php page. add 1 to a session variable. as soon as it reaches 3, you block the account with the username that he enters.

I don't know what your website is like so I can't help more :x