How block user for 40 minutes after 6 failed login attempts in PHP

Question

I am trying to create a script for login throttling. I want to prevent a user from logging in for 40 minutes if he/she was unable to log 6 times. I have created a login_at