Sort:  

Maybe with a PHP/CMS (phpSQLliteCMS) kinda solution?

It already uses a little PHP for the backend, so I'd probably just add a hidden flag and stop it from being given back to the frontend where hidden = 1