Protect passchange page against bruteforce attack

[bepe]

Hello,

I'm gonna use dolomike's script for client-side passchange:
http://isp-control.net/documentation/how..._changer?s[]=change&s[]=password

but I have doubts.

Since it is unprotected against brute force cracking, I'd like to implement ISPCP's protection method (N seconds between attempts, IP ban after 3 unsuccessful attempts) for it.

How can I do that, or can my users change their password within an already protected ISPCP environment? (e.g inside webmail or other interfaces)

If there was any documentation about this, please point me to the right direction.

Thank you.

B.