PHP读取XML实现登录验证：如何遍历所有用户节点匹配账号密码？

我正在做PHP结合XML的练习（清楚登录信息不该存储在XML中），现有一段登录验证PHP代码仅能匹配XML中第一个用户的邮箱，希望改进代码，实现遍历所有<customer>节点，找到匹配邮箱后验证该节点内的密码。

XML数据 #

<?xml version="1.0"?>
<customers>
  <customer>
    <customerID>1747267206223730</customerID>
    <firstname>123</firstname>
    <lastname>123</lastname>
    <email>123@123.com</email>
    <phone>0444444444</phone>
    <password>123</password>
  </customer>
  <customer>
    <customerID>1747267238619299</customerID>
    <firstname>123</firstname>
    <lastname>123</lastname>
    <email>1234@123.com</email>
    <phone>0482222222</phone>
    <password>123</password>
  </customer>
  <customer>
    <customerID>1747267243491036</customerID>
    <firstname>123</firstname>
    <lastname>123</lastname>
    <email>12345@123.com</email>
    <phone>0482222222</phone>
    <password>123</password>
  </customer>
  <customer>
    <customerID>1747267246407122</customerID>
    <firstname>123</firstname>
    <lastname>123</lastname>
    <email>1234556@123.com</email>
    <phone>0482222222</phone>
    <password>123</password>
  </customer>
  <customer>
    <customerID>1747269825276695</customerID>
    <firstname>afdasc</firstname>
    <lastname>vadscas</lastname>
    <email>test@test.com</email>
    <phone>0485555555</phone>
    <password>321</password>
  </customer>
</customers>

我尝试的PHP代码 #

<?php

if(isset($_GET["email"]) && isset($_GET["cPassword"])){
    
    $loginEmail=$_GET["email"];
    $loginPwd=$_GET["cPassword"];

    $doc = new DOMDocument();
    $doc->load('../../data/customer.xml');
    $customers = $doc->getElementsByTagName('customers');

    foreach ($customers as $customer) {
    $email = $customer->getElementsByTagName('email')->item(0)->nodeValue;
    $password = $customer->getElementsByTagName('password')->item(0)->nodeValue;
    
    if( $email == $loginEmail && $password == $loginPwd)
    {
        echo "found the result";
    }
    
}

}
?>

问题分析与修正代码 #

你的代码问题出在getElementsByTagName('customers')——它获取的是XML的根节点<customers>，遍历这个节点只会循环一次，每次取的是根节点下第一个<email>和<password>，所以只能匹配第一个用户。

修正后的代码会直接获取所有<customer>节点并遍历，从每个节点内提取对应的邮箱和密码进行验证：

<?php
if(isset($_GET["email"]) && isset($_GET["cPassword"])){
    $loginEmail = $_GET["email"];
    $loginPwd = $_GET["cPassword"];

    $doc = new DOMDocument();
    $doc->load('../../data/customer.xml');
    // 改为获取所有<customer>节点
    $customerNodes = $doc->getElementsByTagName('customer');
    $found = false;

    foreach ($customerNodes as $customer) {
        // 从当前<customer>节点内获取邮箱和密码
        $email = $customer->getElementsByTagName('email')->item(0)->nodeValue;
        $password = $customer->getElementsByTagName('password')->item(0)->nodeValue;
        
        if($email === $loginEmail && $password === $loginPwd){
            echo "登录验证成功";
            $found = true;
            // 找到匹配用户后跳出循环，提升效率
            break;
        }
    }

    // 未找到匹配用户时提示
    if(!$found){
        echo "邮箱或密码错误";
    }
}
?>

关键改进点 #

• 替换getElementsByTagName('customers')为getElementsByTagName('customer')，直接获取所有用户节点
• 遍历每个用户节点时，从当前节点内提取对应的邮箱和密码，确保匹配的是该用户的信息
• 添加$found标记和循环跳出逻辑，避免不必要的遍历，同时处理验证失败的情况

内容的提问来源于stack exchange，提问作者BigLookBamboo