How to start studying IB?

Question

Information Security

Hello dear friends! Recently, I became interested in information security (for the most part, the web, I'm not interested in reversing) and I want to get as much knowledge as possible in the shortest possible period of time, therefore, I make a plan according to which I will work. I would like your advice on where to start, what to pay more attention to. I ask not for the sake of hype, I want to hear as much advice from the collective mind as possible so as not to miss anything and put it in my head. Links to resources, useful utilities, personal opinion, and in general everything related to the topic are welcome. How would you approach the study of IS?
What I know and can do at the moment: C++ and Python programming languages ​​(+ a general understanding of programming, so learning new languages ​​is not a problem), very basic knowledge of SQLinj and XSS mechanisms, OllyDbg + IDAPro (I used it for debugging), I know Linux at an experienced level user.
UPDATE:
Here is a list of what you need to know and understand, please add:
- PHP (Laravel/Yii2/Symfony);
- SQL Injection, XSS;
- Network device, network protocols;

Answer 1

Well, since 60% of the web is php, I think it's worth starting with it.
Then all sorts of SQL and SQL injection

Answer 2

OWASP and look for a mentor or future job