$queryString="select * from tablo where "
if($_POST["marka"]!=''){
     $queryString.=" marka='".mysql_real_escape_string($_POST["marka"])."'";
}
if($_POST["model"]!=''){
     $queryString.=" model='".mysql_real_escape_string($_POST["model"])."'";
}
mysql_query($queryString);