added one more validation case - values passed by 'hacking' URL
validated negative values passed to form by hacking URL