Protects your login form from brute force attacks by limiting how many times someone can try to log in. After 3 failed login attempts, it automatically triggers a 30-second security delay where the login button is disabled, forcing users to wait before trying again.