The SQL Window does not support SQL*Plus commands, only SQL and PL/SQL. For SQL*Plus compatibility you can use the Command Window instead.
To use substitution variables in the SQL Window you can use the & symbol:
select * from product where product_id = &
See chapter 12.3 in the User's Guide for more information about substitution variables.