Sort:  

It already uses a little PHP for the backend, so I'd probably just add a hidden flag and stop it from being given back to the frontend where hidden = 1