I am making a website where users need to log in to use all the functions. The login form is placed on the landing page, but the actual login goes through a second page, login.php. If a user types something wrong, the user is redirected to login.php. On login.php the login form appears again alongside an error message like "Wrong password/username combination".
I am trying to make the website as safe as possible from hackers, and my question is, would it make any sense if I put a captcha image on the login page that the user has to fill in for each login attempt, or will it be more annoying than useful?