Practical HTTP Host header attacks – Must read to understand how hackers use HTTP headers to hack websites.
Link to OWASP cheatsheet – a good cheat sheet
Website security by MDN – covers some very basic information about website security such as SQL injection