interactive validation form responsive media breakpoints mobile first

How different is modern ecommerce form validation to my code? I imagine that form validation could be an entire field of work, and there is a lot of money in ecommerce. I can see how it can be over-engineered, but I also understand that validation could provide protection from xss or sql injections or other malicious activities.