That's not enough!
For avarage joe it's fine, but "smart users" will still be able to send a post request and set them invisible..
The admin could see that they're invisible, but he wouldn't know why and then the really expensive part starts => checking how they where able to do this..
That's why you SHOULD ALWAYS prevent this on server side too!
Never remove / comment out the form fields and think "it's done"