[mr_overalls]

The Web Application Hacker's Handbook is also practically a must-read for those in the field.

https://www.amzn.com/B005LVQA9S/

[blinkingled]

+1 for WAHH! It is quite good in that it covers everything and is very readable for a book on subject as this.