How to write your own throttle rate limit

I want to add features for limiting the number of password reset attempts. For example, Twitter limit the number of password reset attempts 5 times a day.