receiver.php

<?php
include('secret.php');

$headers = getallheaders();
$hubSignature = $headers['X-Hub-Signature'];
list($algo, $hash) = explode('=', $hubSignature, 2);

$payload = $HTTP_RAW_POST_DATA;
$data = json_decode($payload);
$payloadHash = hash_hmac($algo, $payload, $secret);

$mfile = 'receiver_php.log';
$mstring = "Got here 1\n";
file_put_contents($mfile, $mstring);

// if it's not sent from github, kill it.
if ($hash !== $payloadHash) {
  $mstring = "died\n";
  file_put_contents($mfile, $mstring);
  die('Unauthorized');
}

$mstring = "Got here 2\n";
file_put_contents($mfile, $mstring);

if ($data->ref == 'refs/heads/deploy') {
        echo shell_exec('python receiver.py ' . $data->repository->full_name . ' ' . $data->pusher->email);
        echo 'success ' . $data->repository->full_name;
} else {
        echo 'not deploy branch';
}
?>

success