The uploaded file is stored in a temporary folder outside your usual
PHP `filesystem'.
IIS seems to deny direct access to this folder, so you have to stick to
PHP's special functions for handling file uploads.
is_file() checks for regular files and returns false on directories or
symlinks, while file_exists() returns true, if the file, link or
directory exists.