www.wysiwygwebbuilder.com

Is there a right or wrong way of embedding php code.

Straight php code or using include statement (for more security)

Any tips please.

Obviously the template has to be published and be behind a mysql server.

Any tips, especially security.

TIA

It depends on the code you are adding.
You can add custom code via Page HTML or an HTML object.