title: Best way to limit (and record) login attempts
body: <p>Obviously some sort of mechanism for limiting login attempts is a security requisite.  While I like the concept of an exponentially increasing time between attempts, what I'm not sure of storing the information.  I'm also interested in alternative solutions, preferrably not including captchas.</p>
  
  <p>I'm guessing a cookie wouldn't work due to blocking cookies or clearing them automatically, but would sessions work?  Or does it have to be stored in a database?  Being unaware of what methods can/are being used so I simply don't know what's practical.</p>