Robustness: user can't enter in number less than 0