Does user input in SOQL need to be escaped link SQL?
for example if i have
$account = "SELECT Account.Name, (SELECT Quantity, PricebookEntry.ProductCode FROM OpportunityLineItems), Opportunity.Name, Opportunity.Id FROM Opportunity WHERE Account.Id='$acc' AND Opportunity.saleComplete__c = true";
Where $acc is user input, would i need to escape this?
For a website i need to get a list of all Products an account has ( I suppose products in the opportunities the account has ) and list them on the page, Is there an easy way to do this with the REST API?
