If you google for JavaScript and XML you'll find some functions online. but yesh tis betetr to use PHP and XSLT for things like this, more secure and wont need JS enabled.