i got codes like this:

1-user enter username
2-user enter password
---if correct--->to another page
---if incorrect 3 times---display message

PROBLEM

if($dbpassword == $txtpassword){
$txtMsg = "Logged in";
}
else{
++$count;
$txtMsg = "Incorrect password $count";
}

$count does not count.
it became an array i think, it doesn't count past 1.

i tried store it in a session, it worked but the problem with having $_SESSION['count'] is it keeps counting if i press 'refresh' from the browser. HELP!

try this it looks good
http://hubpages.com/hub/User-Authent...-and-web-forms

To keep track of number of times the user tried to log in, you have to either use a session variable, store number of tries in a database, or set it as a GET-variable. Where the two first alternatives are good and the third one basically sucks.

i tried store it in a session, it worked but the problem with having $_SESSION['count'] is it keeps counting if i press 'refresh' from the browser.

Normally an user wouldn't refresh the page after a failed login atempt, and if she does she'll have to suit herself. Go for the session solution.