Use realpath() to find temp uploaded file

The [`is_uploaded_file()`](http://php.net/manual/en/function.is-uploaded-file.php) function doesn't work as expected on case-sensitive filesystems (i.e. Windows), depending on how `%TEMP%` is defined. Using `realpath()` beforehand fixes this, and the function works correctly.